Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
File:                     yIYjh23RrY5iSiPdUossZMgKhSE.mft (raw, json)
Hash identifier:          02rY+B84pDlSi8and19MmChms8p19oUV443686jAcck=
Subject key identifier:   05:A4:79:2C:7F:87:5B:A7:84:7D:D2:C9:E0:63:D5:D9:38:DB:79:BA
Authority key identifier: C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21
Certificate issuer:       /CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
Certificate serial:       018F8635EDBE1C6C4DDD3ECB81E8B5115ED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
Manifest number:          98
Signing time:             Fri 17 May 2024 11:00:32 +0000
Manifest this update:     Fri 17 May 2024 11:00:32 +0000
Manifest next update:     Sat 18 May 2024 11:00:32 +0000
Files and hashes:         1: NkesC1O1X58aN3Q08Bk3Vir53vY.roa (hash: +Fu4hmCCF23TVq8nPR7W9xkukm0bntFTgUyGcWSuzQk=)
                          2: yIYjh23RrY5iSiPdUossZMgKhSE.crl (hash: w4bC3KYuHYJ+iJitwE+P4lm1NIWN8IsD3q0iTKppNb4=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 11:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:35:ed:be:1c:6c:4d:dd:3e:cb:81:e8:b5:11:5e:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c88623876dd1ad8e624a23dd528b2c64c80a8521
        Validity
            Not Before: May 17 11:00:32 2024 GMT
            Not After : May 18 11:00:32 2024 GMT
        Subject: CN=05a4792c7f875ba7847dd2c9e063d5d938db79ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:d9:cd:9f:48:b7:af:ff:6e:43:cc:43:7a:
                    93:5c:2a:f4:b2:39:28:d7:b7:8f:d8:ab:a2:bf:8e:
                    44:50:a5:f1:4d:da:ea:8e:31:5c:fb:57:fc:e9:6c:
                    40:58:08:b5:41:33:01:d1:eb:ae:b3:8d:2c:ba:47:
                    6d:7b:f6:fd:d2:74:1c:33:c4:49:3b:4f:84:ce:b4:
                    eb:53:4f:3d:81:d2:8f:f1:24:32:42:89:77:7f:be:
                    d4:cc:8b:b1:68:c1:01:fa:c3:9c:40:6c:c0:2c:c8:
                    ce:e8:7c:e2:09:bc:cb:ff:30:b7:61:66:a0:98:eb:
                    5e:73:f0:10:20:74:f6:b0:5e:f3:97:4c:39:fb:8e:
                    79:bf:33:ef:1e:e2:9f:aa:6b:d4:77:19:06:8e:64:
                    8e:75:1c:aa:ce:a4:89:2c:ed:95:9f:85:df:28:16:
                    40:20:af:01:fd:3e:07:01:8f:26:71:6b:b4:66:92:
                    b8:3f:b9:67:04:54:cf:5c:57:57:d5:e7:52:3c:dc:
                    2d:b0:ef:b3:d2:24:33:6d:c0:3d:5f:36:e1:c2:da:
                    75:1f:66:bf:47:e7:f8:6d:12:63:53:f9:c1:8e:56:
                    3f:b6:9a:ae:14:21:fe:1b:28:02:2f:7e:aa:d8:65:
                    40:9f:44:b3:3f:f4:3d:da:fc:3a:5e:89:40:1f:5e:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A4:79:2C:7F:87:5B:A7:84:7D:D2:C9:E0:63:D5:D9:38:DB:79:BA
            X509v3 Authority Key Identifier:
                keyid:C8:86:23:87:6D:D1:AD:8E:62:4A:23:DD:52:8B:2C:64:C8:0A:85:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yIYjh23RrY5iSiPdUossZMgKhSE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/1825d1-7c01-4915-a444-2eb51261ddba/1/yIYjh23RrY5iSiPdUossZMgKhSE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:e4:da:11:b2:e3:fd:43:f8:b4:d4:e5:76:d1:f1:2b:19:21:
         02:fb:6c:51:88:16:60:22:3b:ca:7c:19:bb:32:9a:11:1c:f6:
         00:3c:80:70:d2:76:5b:29:60:cd:2d:12:6d:04:3e:12:40:3d:
         ab:8c:25:e0:06:41:90:96:74:e3:e2:54:f8:57:62:50:7f:ba:
         8c:4c:d7:18:ef:4d:06:fe:c6:1d:04:18:5e:79:e7:47:7b:cb:
         f5:4f:3b:3f:26:c9:ac:85:dd:8c:ea:e8:e9:dd:42:71:99:0d:
         7a:a3:95:1d:52:a9:a3:b0:6e:d3:2d:06:50:92:59:dc:45:06:
         81:6c:76:8f:30:cf:05:50:c8:1b:f2:a6:e3:3c:9d:10:8a:53:
         76:29:5c:7a:63:a3:d0:18:a2:5f:21:b1:78:6b:5a:c1:20:77:
         d8:70:10:d5:58:26:37:cd:c2:64:7b:c7:d6:2c:09:ad:52:a5:
         26:7f:0e:0e:88:e9:5f:7a:0d:11:98:1d:d3:10:04:94:92:a6:
         07:d9:50:43:07:1e:32:de:e8:d3:62:19:f1:84:87:89:59:86:
         1e:4b:d6:2b:37:db:71:1e:10:ca:3f:94:15:6d:df:fa:4b:bf:
         22:d5:dd:02:19:11:53:ea:2d:d8:36:b4:e2:14:a1:53:a3:5b:
         f3:bd:e2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:20:36 2024 by rpki-client on console-ams.rpki-client.org